Toolbar isearch

Résolu
Fatih -  
 Utilisateur anonyme -
Bonjour à tous

Depuis hier apres-midi j'ai une petite barre de recherche qui fait que s'afficher dans le coin en bas a droite au dessus de l'heure.

J'ai tout essayé (ad-aware/microsoft antispyware/spybot searc&destroy..) mais je ne suis pas parvenu a le supprimer

Quelqu'un peut-il m'aider

voici un screen :
http://membres.lycos.fr/ultratfe/isearch.jpg

14 réponses

  1. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Salut,

    Télécharge Hijackthis:
    http://www.merijn.org/files/hijackthis.zip

    Dezippe-le dans un dossier prévu a cet effet.
    Par exemple C:\hijackthis
    Lance le puis clique sur
    "do a system scan and save logfile" et pas autre chose
    Ensuite, fais un copier-coller du log entier ici.
    0
    1. Fatih
       
      Logfile of HijackThis v1.99.1
      Scan saved at 13:39:22, on 28/04/2005
      Platform: Windows XP (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.exe
      C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
      C:\WINDOWS\System32\nvsvc32.exe
      C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
      C:\WINDOWS\svchost.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\WINDOWS\System32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\WINDOWS\isrvs\desktop.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\n?pdb.exe
      C:\Documents and Settings\fatih\Bureau\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\fatih\LOCALS~1\Temp\sp.html
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\fatih\LOCALS~1\Temp\sp.html
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost
      F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
      O2 - BHO: Activimmo - {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} - C:\WINDOWS\DOWNLO~1\actitool.dll
      O2 - BHO: (no name) - {520474D9-CC7D-430E-93D3-8D01900A0C0C} - c:\windows\system32\lmhhb.dll (file missing)
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O2 - BHO: (no name) - {5E5D426C-8FD4-F62D-F4B5-F56DA145B1CE} - C:\WINDOWS\System32\bxfev.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: (no name) - {CB5739A0-4534-46B9-A4AB-ED45BE25D976} - C:\WINDOWS\System32\iccvid32.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Activimmo - {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} - C:\WINDOWS\DOWNLO~1\actitool.dll
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [AntiSite] C:\Program Files\AntiSite\AntiSite.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\RunOnce: [MicrosoftAntiSpywareCleaner] C:\Program Files\Microsoft AntiSpyware\gcASCleaner.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [MessengerDiscovery] C:\Program Files\MessengerDiscovery\MessengerDiscovery.exe
      O4 - HKCU\..\Run: [Hmtl] C:\Documents and Settings\fatih\Application Data\ctro.exe
      O4 - HKCU\..\Run: [Cqsrwfpz] C:\WINDOWS\System32\n?pdb.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
      O15 - Trusted Zone: *.slotchbar.com
      O15 - Trusted Zone: *.ysbweb.com
      O15 - Trusted Zone: *.slotchbar.com (HKLM)
      O15 - Trusted Zone: *.ysbweb.com (HKLM)
      O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
      O16 - DPF: {093F9CF8-0DE1-491C-95D5-5EC257BD4CA3} - http://akamai.downloadv3.com/binaries/IA/dtc32_FR_XP.cab
      O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.babenet.com/cabs/videox.cab
      O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/SmileyCentralInitialSetup1.0.0.6.cab
      O16 - DPF: {297F2B65-017C-11D5-A128-00D0B7869AD6} (SpectorPhotoUploader Control) - http://photoprint.photohall.be/import/spu.cab
      O16 - DPF: {299A9646-5250-4BDC-AA93-30040D85EE20} (CaraPlus.ChatClient) - http://www.caraplus.com/activex/cab/Caraplus.CAB
      O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab
      O16 - DPF: {2FF18E20-DE11-11D1-8161-00A0C90DD90C} (MSNBC News Menu Control 3.01) - http://www.ntv.com.tr/download/nm1228.cab
      O16 - DPF: {2FF18E30-DE11-11D1-8161-00A0C90DD90C} (MSNBC News Menu Control 3.02) - http://www.ntv.com.tr/download/nm0321.cab
      O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
      O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
      O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
      O16 - DPF: {4E7BD74F-2B8D-469E-DEF1-F078BD81B93C} (Activimmo) - http://www.toolbar.be/actitool.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f002.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
      O16 - DPF: {D06A22B4-6087-4D3D-B7AF-82B113E9ABD4} (CPostLaunch Object) - http://www2.verizon.net/update/msnwebinstall/includes/vzWebIns.CAB
      O16 - DPF: {D5FC2094-4B01-4F6C-A07C-E247C9442E5A} (AvatarWeb Control) - http://www.msnplus.co.kr/download/activex/AvatarWeb.cab
      O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www2.incredimail.com/contents/setup/downloader_sp1/imloader.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by23fd.bay23.hotmail.msn.com/activex/HMAtchmt.ocx
      O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://216.65.38.226/crack.CAB
      O18 - Protocol: bw+0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {34D1F71E-CE3B-4C50-8514-50A94D38EC5A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
      O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
      O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
      O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
      O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Sptisrv.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
      0
  2. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Tout d'abord, fais tes mises à jour via Windows Update :
    ouvre ta page Internet, Outils, Wndows Update
    Installe-les toutes et redémarre ton PC !

    Pendant ce temps, on s'occupe de ton log !
    0
    1. Fatih
       
      Le probleme c'est que je ne sais pas faire le Windows Update, quand j'ouvre la page, ca fait "Pas de réponse".

      Pour l'instant je veu me débarasser de ces spywares ou trojans, ensuite je vai graver sur CD mes dossiers et fichiers nécessaires (ce qui va prendre beaucoup de temps) mais isearch et compagnie font ralentir. Apres m'être débarasser de ces trucs, d'avoir graver mes fichiers, je vai formater et réinstaller windows
      0
  3. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    D'abord, peux-tu faire un scan en ligne ici, pour vérifier si tu n'as rien question virus :
    http://www.ravantivirus.com/scan/

    Clique sur "To continue without subscribing click here" et attends.
    Lorsque Ready est affiché dans Status, coche la case Autoclean puis clique sur "Scan my PC"
    A la fin de l'analyse, copie/colle le rapport ici.
    0
  4. Fatih
     
    Je copie/colle le raport entier ? Parcequ'il est vraiment long

    Sinon tout a la fin du rapport ya ça :

    Scanned
    ============================
    Objects: 53647
    Directories: 5288
    Archives: 1139
    Size(Kb): -625336
    Infected files: 676

    Found
    ============================
    Viruses found: 24
    Suspicious files: 1
    Disinfected files: 0
    Mail files: 109
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Oui, copie-colle le ! On a du boulot !!!
    0
    1. Fatih
       
      Pourtant mon Norton Antivirus ne detecte rien du tout :-s

      Scan started at 28/04/2005 14:09:53

      Scanning memory...
      Scanning boot sectors...
      Scanning files...
      C:\xxx.exe - TrojanDownloader:Win32/Delf.CB -> Infected
      C:\Documents and Settings\All Users\Documents\ îÚ_sgr.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\!ReadMe.exe - Backdoor:Win32/Gobot.S -> Infected
      C:\Documents and Settings\All Users\Documents\#phatass - Worm:Win32/Gaobot -> Infected
      C:\Documents and Settings\All Users\Documents\bmsvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\bomsvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\crss.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\csrs.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\cvmonitor.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\dmsvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\explore.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\explored.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\fensvc32.exe - Worm:Win32/Gaobot -> Infected
      C:\Documents and Settings\All Users\Documents\gmsvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\msaa.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\msinstl.exe - Worm:Win32/Dedler.R -> Suspicious
      C:\Documents and Settings\All Users\Documents\msnmsgr.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\mssvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\NortonAntiVirus.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\NortonAV.exe - Worm:Win32/Gaobot -> Infected
      C:\Documents and Settings\All Users\Documents\rpc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\runsvc32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\smsls.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\svcnet.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\svcroot.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\svcsp.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\svcsys32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\svhost.exe - Worm:Win32/Gaobot -> Infected
      C:\Documents and Settings\All Users\Documents\system32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\uninstall.exe - Worm:Win32/Dedler.R -> Infected
      C:\Documents and Settings\All Users\Documents\wintask.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\winz-task.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\All Users\Documents\ó]jtass - Worm:Win32/Gaobot -> Infected
      C:\Documents and Settings\All Users\Documents\Ma musique\winiso\WINISO53.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-5db50b5e-2a5905d6.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-63644d4e-45040a27.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-1756e264-6349d86f.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\VerifierBug.class-28b7d374-57e69bb4.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->Gummy.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->Counter.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-6e37709f-27da68ce.zip->VerifierBug.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->Gummy.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->Counter.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-78eef63f-2683cd45.zip->VerifierBug.class - Trojan:Java/ClassLoader.D -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-2da0d5df.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-4f831c31.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-11faa9ed-76a6e5f1.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-2d64b048.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-190119e9-332aa130.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->GetAccess.class - Trojan:Java/ClassLoader -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->InsecureClassLoader.class - Java/Bytverify -> Infected
      C:\Documents and Settings\fatih\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-1f5b6b54-2bdce580.zip->Installer.class - TrojanDownloader:Java/OpenConnection.F -> Infected
      C:\Documents and Settings\fatih\Bureau\ev\start.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\ev\QuickTime\QuickTimeInstaller.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Jeux\Counter Strike\HLSW.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\PORTFOLIO\portfolio\zspoof.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\acdsee.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\Nandub.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\psmplay.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Bureau\Raccourcis Bureau non utilisés\WINISO.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\sp.html - Trojan:HTML/Starpage* -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\temp.frB506 - Trojan:HTML/Starpage* -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\1A866E76\directxperience_100\Uninstall.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\ICD2.tmp\jinstall.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\ins1.tmp\LDMClient.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\ins2.tmp\LDMClient.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour 19_XP.zip\CMR2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour caraflood2.zip\CaraFlood2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour ecard.zip\ecard.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 1 pour minou.zip\Minou.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\Répertoire temporaire 2 pour ecard.zip\ecard.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temp\_ISTMP2.DIR\_ISTMP0.DIR\ISUninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\IINRL4ZJ\125399[1].exe - Tool:PornDialer.BP -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\IINRL4ZJ\12[1].exe - TrojanDownloader:Win32/Small.MY -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\JYQIFEYT\125399[1].exe - Tool:PornDialer.BP -> Infected
      C:\Documents and Settings\fatih\Local Settings\Temporary Internet Files\Content.IE5\RH9REAY9\1[1].htm - Exploit:HTML/MhtRedir.gen* -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes fichiers reçus\hlkeyfr15\hlkeyfr.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\Mirc\mirc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\aawsepersonal.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\KLR0076E.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\SPNG2.0.217b.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\progz\hijackthis_198\HijackThis.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\Mes images\Fatih\ultraslan\titan5shuk.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\eChanblard.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\eMuleWatcher.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\bin\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\bin\vlc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\eChanblard\config\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\son\CTZAPXX.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\son\COMMON\PSConv.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\programme\son\COMMON\ReadReg.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\AGSetup0609.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\ChipCat.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\magicloadmodule.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\setup0362.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\NEC-STBDownload\NEC-STBDownload.exe - Win32/HLLP.Jeefo -> Infected
      C:\Documents and Settings\fatih\Mes documents\satellite\progr\MultiProg.exe - Win32/HLLP.Jeefo -> Infected
      C:\NVIDIA\Win2KXP\66.93\nvudisp.exe - Win32/HLLP.Jeefo -> Infected
      C:\NVIDIA\Win2KXP\66.93\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\NVIDIA\WinXP-2K\45.23\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\NVIDIA\WinXP-2K\45.23\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\NVIDIA\WinXP-2K\45.23\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\OMS\IVIEW\IBROW.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\ASPI Layer Install\aspichk.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIcodec.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIDeFreezer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIFrate.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\InfoTool.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\lamedropXPd.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\LSXMpgCfg.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\NetPlayer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\NetServer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\OggCut.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\oggdropXPd.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\Validator.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\VFAPIConv.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\vsconv.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\VSRip.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\vssconf.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\DivX Fix\DivFix.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\Graph Edit\GraphEdit.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\GSpot\GSpot.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\ACE Mega CoDecS Pack\UtilitieS\OGGMuX\OggMux.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\AceMegaCodec\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\CoverDesigner\CoverDes.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\ImageDrive\ImageDrive.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero\Uninstall\UNNero.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero BackItUp\NBJ.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero BackItUp\NBR.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero SoundTrax\SoundTrax.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero Toolkit\CDSpeed.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero Toolkit\DriveSpeed.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\Nero Toolkit\InfoTool.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ahead\WMPBurn\WMPBurn.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Analog Devices\SoundMAX\DLSLdr.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Analog Devices\SoundMAX\DLSLoader.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Analog Devices\SoundMAX\SMax4.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Analog Devices\SoundMAX\SMax4Wiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\AntiSite\AntiSite.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\BBL\Security\hb32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\CyberLink\Common\UpdateIPR.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\CyberLink\PowerDVD\CLDMA.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\CyberLink\PowerDVD\cltest.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\CyberLink\PowerDVD\ddtester.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DecalConverter\DecalConverter.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Ap.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Uninstall.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Console\SelPCCam.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Console\Watch.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Sound'Em\bin\SoundEm.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Sound'Em\bin\SoundVw.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\DV Series\Sound'Em\data\0101010000\SoundVw.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\Driver\7\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\Driver\9\Intel 32\IDriver2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\IKernel.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\InstallShield\engine\6\Intel 32\knlwrap.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\CdlsHand\CdlsHand.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\CamServr.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\CamWizrd.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\DelDev.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\InstFiles.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\InstMed.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Shutdown.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Update.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\VidCtrl2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\Database Replication\WZCNFLCT.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\Equation\EQNEDT32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPOCRDC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPSCAN.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\MSPaper\MSPVIEW.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\Office10\DW.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\PhotoEd\PHOTOED.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\vs7jit.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Microsoft Shared\web server extensions\50\bin\CFGWIZ.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Real\Update_OB\rnuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udapp.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udconf.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Sony Shared\OpenMG\updater\udlaunch.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Symantec Shared\CCLGVIEW.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Symantec Shared\Sevinst.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\IraLrShl.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Symantec Shared\LiveReg\VcSetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\System\Mapi\1036\CNFNOT32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\System\Mapi\1036\SCANPST.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Verizon Online\SFP\vzNetSvc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Verizon Online\SFP\vzSFPWin.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Fichiers communs\Verizon Online\VOLMSN\vzMsnIns.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{117C01B5-9D68-4A15-85E2-A7CDFA82CEB9}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{12042FF7-8D00-4384-9A25-638918B94950}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{3B24B725-D81F-442D-8CE5-2AF05A4A4CC9}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{5809E7CF-4DCF-11D4-9875-00105ACE7734}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{71D6CE84-B7DC-4166-8E0D-56C1C37BFB5A}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{77E923E1-59E2-4254-A3BC-D582234DCBD5}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{B3B299F9-AD78-4AE6-99EC-70B9F13D7636}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{D0194539-8118-4FD7-8ABA-912B2D479B48}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{EE85B4C2-49F2-4A3B-A8FA-458DAD0D820F}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{EFCE5837-FC21-11D6-9D24-00010240CE95}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{F1BA3CD5-89DC-4273-8603-A75F33E9B335}\Setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\InstallShield Installation Information\{FFF5DEE7-8107-436B-9726-7573458FE6AE}\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\intelliScore Polyphonic Demo\iSpmrsd.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\interMute\SpySubtract\CWSInstall.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\interMute\SpySubtract\SpySub.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Internet Explorer\ie6setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\IxoVM\ixovm.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\IxoVM\ixovmupd.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Jasc Software Inc\Paint Shop Pro 7\Register.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Jasc Software Inc\Paint Shop Pro 7\tubeconverter.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Jasc Software Inc\Setup Files\Paint Shop Pro 7 Try and Buy\setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Java\j2re1.4.1_02\javaws-1_2_0_02-windows-i586-i.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Java\j2re1.4.2_01\bin\jucheck.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Java\j2re1.4.2_01\javaws\javaws.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\AVIPreview.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\gspot.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\kanat.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\kchecker.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\kdat.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\ksig.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\mp3shield.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\ProtoWall 2.0.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Kazaa Lite Resurrection\virtualdub.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\unregaaw.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Plugins\Langs\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Install\bwUnin.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Install\LiteInst.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\Sprite6.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Print Service\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\Editor2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\FWHlpApp.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\FWSetDlg.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\ISStart.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\Launcher.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\QSend.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\QSync.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Logitech\Video\WaveChk.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\blockUser.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\deleteUser.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\launchDP.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\launchIM.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\prjMassDP.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\shell.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\unins000.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MessengerDiscovery\Plugins\prjAutoComplete.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\gcASNotice.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\gcasServAlert.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\gcasSWUpdater.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareUpdater.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\MSSSRT.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft AntiSpyware\Quarantine\C4DD913A-D416-4D55-8D90-03D31E\5CC24B5B-9452-41EE-9923-3F55DA - Trojan:Win32/StartPage.IX -> Infected
      C:\Program Files\Microsoft Office\Office10\FRONTPG.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\GRAPH.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MCDLC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MSACCESS.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MSIMPORT.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MSQRY32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MSTORDB.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\MSTORE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\NSREX.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\POWERPNT.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\PROFLWIZ.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\SETLANG.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\VTIDB.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\VTIDISC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\VTIFORM.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\VTIPRES.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Microsoft Office\Office10\1036\SCHDPL32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\mIRC\mirc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MP3 Shield\MP3Shield.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MPEGPlayer\MPEGPlayer\Mpegp32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MSN\MSNCoreFiles\dw.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MSN\MsnInstaller\msninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MSN Gaming Zone\zone.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\MSN Gaming Zone\zsetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\CKA.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\NSWCFG.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\OBC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\BOOTWARN.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\CFGWIZ.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton AntiVirus\QCONSOLE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton CleanSweep\csinsmnt.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Ghost\Ghost Boot Wizard.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Ghost\Ghostexp.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStart.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Utilities\NDD32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Utilities\SI32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Utilities\UE32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Utilities\WINDOC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Norton Utilities\WIPINFNT.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Process Viewer\PrcView.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Speed Disk\SDNTC.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Web Cleanup\WCQUICK.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Norton SystemWorks\Web Cleanup\WCVIEWER.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\PowerIE6\PowerIE6.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\quickmov\grdecouv\grdecouv.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\quickmov\grdecouv\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\quickmov\qm\QM95.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\quickmov\qm\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\QuickTime\QTInfo.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\QuickTime\QuickTimePlayer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\QuickTime\QuickTimeUpdater.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Real\RealOne Player\realplay.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Sony\SonicStage\Ojbsir.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Sony\SonicStage\Omgbkup.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Sony\SonicStage\Omgexset.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Sony\SonicStage\Omgjbox.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Stardock\Object Desktop\WindowBlinds\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbconfig.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Symantec\LiveUpdate\LUALL.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Symantec\LiveUpdate\SymantecRootInstaller.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\The Playa\ThePlaya.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\The Playa\validator.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ulead Systems\Ulead COOL 360\UPano.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ulead Systems\Ulead COOL 360\UPV.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ulead Systems\Ulead COOL 360\UPViewer.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Ulead Systems\Ulead Photo Explorer 6.0\PE6.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Valve\Steam\Steam.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Valve\Steam\uninstall_hl2.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Valve\Steam\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Valve\Steam\Unwise32.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\VideoLAN\VLC\vlc.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Visicom Media\FTP Expert 3\ftpxpert3.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WebSiteViewer\125399.exe - Tool:PornDialer.BP -> Infected
      C:\Program Files\Winamp5\AOD\AolAod.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinASPI\WinASPI\Aspichk.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\Windows Media Player\migrate.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinISO\WinISO.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinISO\WINISO53.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinRAR\WinRAR.exe - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinZip\WZQKPICK.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Program Files\WinZip\WZSEPE32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\Sierra\Half-Life\hlkeyfr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\bwUnin-7.2.0.120-8876480SL.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\exdl.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\installer_MARKETING28.exe - TrojanDownloader:Win32/Adload.E -> Infected
      C:\WINDOWS\IsUn040c.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\IsUninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\iun6002.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\IxoVMRmv.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\PLAY32.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\Pplugin4.exe - PWS:Win32/LdPinch.CU -> Infected
      C:\WINDOWS\PSCONV.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\QTW32DEL.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\READREG.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\services.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\Setup1.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\svchost.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SynCor.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\UnGins.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\unin040c.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\uninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB840315\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB840315\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB840987\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB840987\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841356\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841356\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841533\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841533\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841873\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB841873\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB873376\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB873376\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB887811\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB887811\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB887822\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$hf_mig$\KB887822\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB824141$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB828028$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB828035$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB828741$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB833987$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB834707-IE6SP1-20040929.091901$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB835732$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB837001$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB839645$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB840315$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB840374$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB840374$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB840987$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB841356$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB841533$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB841873$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB842773$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB873376$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB887811$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallKB887822$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallQ315000$\netsetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallQ324096$\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallQ328940$\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallQ328940$\msconfig.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$NtUninstallQ828026$\spuninst\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB821557\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB823182\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB823980\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB824105\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB824141\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB824141\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB824146\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828028\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828028\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828035\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828035\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828741\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB828741\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB833987\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB835732\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB835732\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB835732\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB837001\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB837001\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB839645\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB839645\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB840374\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB840374\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\KB840374\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q328310\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q329048\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q329170\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q329390\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q329441\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q329834\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q331953\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q810577\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q810833\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q811493\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q811630\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q815021\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\$xpsp1hfm$\Q817606\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\Fichiers d'installation de Windows Update\ie6setup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\isrvs\sysupd.dll - TrojanDownloader:Win32/Small.QT -> Infected
      C:\WINDOWS\LastGood\PCHEALTH\HELPCTR\Binaries\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\PCHEALTH\HELPCTR\Binaries\msconfig.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\EGAUTH.dll - Trojan:Win32/P2E.G -> Infected
      C:\WINDOWS\LastGood\System32\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\netsetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\DLLCache\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\DLLCache\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\DLLCache\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood\System32\DLLCache\msconfig.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood.Tmp\System32\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\LastGood.Tmp\System32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dxdiag.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\sCache32\2 Find MP3 8.2.0.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\AC3-MP3 converter.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\ACDSee 5.5b.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\ACDSee Classic 2.79.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Ad-aware 6.5 (new).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Adobe Acrobat Reader 5.6.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Adobe PhotoShop 7.1 crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\All Editor 3.0b.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\AOL Instant Messenger 6.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Auction Sentry (new).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\AudioLabel CD Labeler 3.0 (+crack).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Battlefied1942 Pack4 (crack+bloodpatch).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\BearShare 5.1.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\C&C Generals Pack2 (new patch).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Complete UK Music Database 4.2.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\DirectDVD 4.9.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\DivX Bundle 6.2.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\DivX edit (new).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\DivX Video Bundle 5.5.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Download Accelerator Plus 6.3.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\DvD Rip guide (+tools) st0rm.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Dynamite Downloads.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Easy CD Creator Software Update.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Find 1.0.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\FlashFXP (keygen).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\FreeRip 4.30.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Genie Stream 3.2.4.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\GetRight 5.5 + crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Global DiVX Player 2.0.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Gothic 2 (m-patch).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Grokster 2.0.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Hacker Tutorial (by ph3Akz).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Half-Life keygen (+ogc hack).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\HL keys (working).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\I.G.I. 2 (new crack).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\ICQ Lite beta (b2253).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\ICQ Pro 2003a beta (b4600).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\iMesh 4.1 beta.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\iSnipeIt 5.0c.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\James Bond 007 Nightfire crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Kazaa Media Desktop 2.5.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Kazaa Skins 1.8.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\KaZooM MP3 Kazaa Accelerator 2.5.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Medal Of Honor (Allied Assault) crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Microangelo 6.0b.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\mIRC 6.x addon patch.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\mIRC s3th war-script.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Morpheus 2.6.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\MP3 cut pro 3.0.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\MSN Messenger 5.5.10.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Need for Speed 6 (new cars + crack).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\NeoNapster 3.92.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Nero Burning ROM 5.8.2.4.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Network Cable + ADSL Speed 2.0 (beta).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\New Nvidia (geForce) drivers (beta).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Nimo Codec Pack 9.0 (stable).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Operation Flashpoint (bloopatch).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Patch Creator 3.5a.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\PhotoShow 3.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Pop-Up Stopper 4.0 (beta).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Ps2 to Pc tutorial (+tool).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\QuickTime 7.2 (new).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Raven Shield 5.32 crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\RealJukebox Basic 2.8.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\RealOne Free Player 2.8.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\RemoteSpy 1.5.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Sim City 4 crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Splinter Cell crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\TitJiggle (flash game).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Trillian 0.8 + plugins.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\UniversalFlood (4.8b).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Unreal2 (2.8) crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\UT2003 multi-crack (new).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Warcraft3 battle.net(2.5) crack.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Window Washer 4.8.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\WinMX 3.5.1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\WinRAR 3.8.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\WinZip 8.3b (crack).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\WinZip 9.0 SR-1.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\Wippit 2.1 (beta).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\WS_FTP LE 6.0.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\sCache32\XViD bundle (codec+tutorial).exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\accwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\agentsvr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\cfgwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\clipbrd.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\conf.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dfrgntfs.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dialer.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dlimport.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\dwwin.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\eudcedit.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\explorer.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fp98swin.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fsquirt.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fxsclnt.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\fxscover.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\helpctr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\icwconn1.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\iexpress.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\irftp.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\logagent.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\logonui.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migload.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migrate.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\migwiz_a.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mmc.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mobsync.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\moviemk.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mplay32.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\msconfig.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\msmsgs.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mspaint.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\mstsc.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\netfxupdate.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\netsetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\ntbackup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\osk.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\pinball.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\progman.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\regedit.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\rsnotify.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\rstrui.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\setregni.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\setup_wm.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\sndrec32.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\spider.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\spuninst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\sysocmgr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\taskmgr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\togac.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\tourstrt.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\unregmp2.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wbemtest.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wiaacmgr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\winhlp32.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wmiadap.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wmiprvse.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wordpad.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wscript.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wuauclt.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\wuauclt1.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\cintsetp.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpdct.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpdsvr.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpinst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjpmig.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjprw.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\imjputy.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\lang\tintsetp.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\SoftwareDistribution\Download\dfd63227c75f2f41fff1e2c80885381e\update\update.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\speech\vcmd.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system\sservice.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\Axdist.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\exdl.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\fservice.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\intronsad.exe - Trojan:Win32/Startpage.FF -> Infected
      C:\WINDOWS\system32\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\lpzxczxct.exe - TrojanDownloader:Wi
      0
    2. Fatih
       
      la suite :

      C:\WINDOWS\system32\lpzxczxct.exe - TrojanDownloader:Win32/Small.MY -> Infected
      C:\WINDOWS\system32\MafiaSetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\NeroCheck.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\netsetup.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\nvappbar.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\nvdspsch.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\nvudisp.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ss2uinst.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\systemctrl.exe - Trojan:Win32/Startpage.FF -> Infected
      C:\WINDOWS\system32\Ud3rT0n2.dll - TrojanDownloader:Win32/Rameh.A -> Infected
      C:\WINDOWS\system32\wincom.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\wincom_.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\wininv.dll - Backdoor:Win32/Prorat.1_6 -> Infected
      C:\WINDOWS\system32\winkey.dll - Backdoor:Win32/Prorat.1_2 -> Infected
      C:\WINDOWS\system32\Wint351.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\wisptis.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\wuauclt1.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\xms32.exe - Worm:Win32/SdDrop.C -> Infected
      C:\WINDOWS\system32\Cult3D\C3DE.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\drivers\delprot.sys - VirTool:WinNT/Ispro.B -> Infected
      C:\WINDOWS\system32\FinePointLib\vzNetDetectEx.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\Macromed\Shockwave 8\UNWISE.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\quicktime\QTPluginInstaller.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0001\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\keystone.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\ReinstallBackups\0006\DriverFiles\nwiz.exe - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\spool\drivers\w32x86\3\E_DMSG00.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\spool\drivers\w32x86\3\E_DPPE03.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_c4259c8\E_DMSG00.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\system32\spool\drivers\w32x86\epsonstylus_c4259c8\E_DPPE03.EXE - Win32/HLLP.Jeefo -> Infected
      C:\WINDOWS\twain_32\LogiVid\HVideoS2.exe - Win32/HLLP.Jeefo -> Infected

      Scanned
      ============================
      Objects: 53647
      Directories: 5288
      Archives: 1139
      Size(Kb): -625336
      Infected files: 676

      Found
      ============================
      Viruses found: 24
      Suspicious files: 1
      Disinfected files: 0
      Mail files: 109
      0
    3. markos Messages postés 85 Statut Membre
       
      salut neo, j'ai le meme pb que fatih, j'ai donc fait un scan avec rav mais je sais pas ce qu'il faut supprimer...Ce serait sympa si tu pouvais m aider..Merci d'avance
      je copierai mon scan si tu me reponds...Bye
      0
  7. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Petit bout par petit bout, supprime les fichiers en gras :

    C:\xxx.exe
    C:\Documents and Settings\All Users\Documents\ îÚ_sgr.exe
    C:\Documents and Settings\All Users\Documents\!ReadMe.exe
    C:\Documents and Settings\All Users\Documents\#phatass
    C:\Documents and Settings\All Users\Documents\bmsvc32.exe
    C:\Documents and Settings\All Users\Documents\bomsvc32.exe
    C:\Documents and Settings\All Users\Documents\crss.exe
    C:\Documents and Settings\All Users\Documents\csrs.exe
    C:\Documents and Settings\All Users\Documents\cvmonitor.exe
    C:\Documents and Settings\All Users\Documents\dmsvc32.exe
    C:\Documents and Settings\All Users\Documents\explore.exe
    C:\Documents and Settings\All Users\Documents\explored.exe
    C:\Documents and Settings\All Users\Documents\fensvc32.exe
    C:\Documents and Settings\All Users\Documents\gmsvc32.exe
    C:\Documents and Settings\All Users\Documents\msaa.exe
    C:\Documents and Settings\All Users\Documents\msinstl.exe
    C:\Documents and Settings\All Users\Documents\msnmsgr.exe
    C:\Documents and Settings\All Users\Documents\mssvc32.exe
    C:\Documents and Settings\All Users\Documents\NortonAntiVirus.exe
    C:\Documents and Settings\All Users\Documents\NortonAV.exe
    C:\Documents and Settings\All Users\Documents\rpc.exe
    C:\Documents and Settings\All Users\Documents\runsvc32.exe
    C:\Documents and Settings\All Users\Documents\smsls.exe
    C:\Documents and Settings\All Users\Documents\svcnet.exe
    C:\Documents and Settings\All Users\Documents\svcroot.exe
    C:\Documents and Settings\All Users\Documents\svcsp.exe
    C:\Documents and Settings\All Users\Documents\svcsys32.exe
    C:\Documents and Settings\All Users\Documents\svhost.exe
    C:\Documents and Settings\All Users\Documents\system32.exe
    C:\Documents and Settings\All Users\Documents\uninstall.exe
    C:\Documents and Settings\All Users\Documents\wintask.exe
    C:\Documents and Settings\All Users\Documents\winz-task.exe
    C:\Documents and Settings\All Users\Documents\ó]jtass
    C:\Documents and Settings\All Users\Documents\Ma musique\winiso\WINISO53.EXE
    0
    1. Fatih
       
      Je supprime simplement de mon pc, je ne dois pas réecrire comme tu l'as fait, c'est un exemple ce que tu as écrit ?
      0
  8. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Tu suis le chemin C:\Documents and Settings\All Users\Documents
    et tu supprimes les fichiers indiqués en gras !
    0
    1. Fatih
       
      Ok je ferai ça petit à petit, la je vai allé bientot au boulot
      Je continue le soir aussi

      Merci encore, on continuera ce soir ou bien demain
      0
  9. Fatih
     
    Rebonjour,

    Que dois-je faire apres avoir supprimer les trucs que tu m'as dit, je supprime petit a petit et il me reste plus beaucoup a supprimer

    Merci
    0
  10. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Salut fatih,

    fais moi voir où tu en es, en repostant un nouveau log de Rav (en entier, bien sûr !)
    0
    1. Fatih
       
      Bonjour,
      Je pense avoir résolu le problème

      Ce que j'ai fait ?

      J'ai redémarrer mon pc en mode sans échec (f8 au démarrage)
      Puis j'ai vu un dossier "ifsrv" sous C:/Windows

      J'ai supprimé ce fichier et j'ai plus ce problème

      Espérons que ça dure

      Merci encore
      0
  11. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Relance quand même un scan sur RAV, je voudrais être sûr que tes bestioles sont bien parties !
    0
    1. Benito
       
      J'ai exactement le même problème. C'est la deuxième fois que je chope cette horreur. La première fois, j'ai suivi les conseils d'un gars sur un forum (tiens donc...). Il fallait rebooter en safe mode sans la console de récupération. Mon PC n'a jamais redémarré, toujours bloqué à l'écran de démarrage. Réinstallation complète et 2 jours pour récupérer les données (160 Gb).

      Donc.... j'ai peur !

      Pas de solution avec Spybot.

      J'ai utilisé RavAntivirus Online, qui m'annonce de mauvaises nouvelles. Voici le log :

      Scan started at 6/05/2005 15:38:32

      Scanning memory...
      process://C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe - TrojanDownloader:Win32/TSUpdate.K -> Infected
      Scanning boot sectors...
      Scanning files...
      C:\Documents and Settings\ba\Local Settings\Application Data\Identities\{3AD1BBB1-DD82-4532-8087-0F2E39B89238}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.24: ("HappyMany" [HappyMobile : pas de temps ` perdre !])->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
      C:\Documents and Settings\ba\Local Settings\Application Data\Identities\{45FC4C2B-A6E6-478F-88A7-D8A3ADB8B3FC}\Microsoft\Outlook Express\Éléments supprimés.dbx->Message.12: (fa380288@skynet.be [Information])->(part0002:Details.zip)->Details.txt ... - Win32/Netsky.Z@mm -> Infected
      C:\Documents and Settings\Weben\Local Settings\Application Data\Identities\{8383F019-F8F1-4EAD-B39E-937BADA17550}\Microsoft\Outlook Express\Boîte de réception.dbx->Message.23: ("HappyMany" [HappyMobile : pas de temps à perdre !])->(Invalid#1*) - MIME/Invalid#1 -> Suspicious
      C:\Documents and Settings\Weben\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst->Attachment.3010: "document.zip"->document.txt .pif - Win32/Mydoom.A@mm -> Infected
      C:\Program Files\common files\wwkm\wwkmm.exe - TrojanDownloader:Win32/TSUpdate.K -> Infected
      C:\RECYCLER\S-1-5-21-2215411835-3117754479-2142776105-1142\Dc4877.exe - TrojanDownloader:Win32/Delf.CB -> Infected
      C:\WINDOWS\loadclean.exe - TrojanDownloader:Win32/Delf.CB -> Infected
      C:\WINDOWS\system32\cmd32.exe - TrojanDownloader:Win32/Delf.CB -> Infected
      C:\WINDOWS\system32\drivers\delprot.sys - VirTool:WinNT/Ispro.B -> Infected

      Scanned
      ============================
      Objects: 68909
      Directories: 4174
      Archives: 1215
      Size(Kb): -1660538
      Infected files: 8

      Found
      ============================
      Viruses found: 6
      Suspicious files: 2
      Disinfected files: 0
      Mail files: 3148




      J'ai utilisé HijackThis v.1.99.1. Voici le log (attention, j'avais killé le process de desktop.exe avant d'exécuter HijackThis). J'ai mis en gras les lignes qui me paraissent dangereuses, avec notamment plein de trucs pornos qui sont apparus comme par enchantement quand je surfais sur astalavista.us :

      Logfile of HijackThis v1.99.1
      Scan saved at 15:36:31, on 6/05/2005
      Platform: Windows XP (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 (6.00.2600.0000)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\System32\CTsvcCDA.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
      C:\Program Files\WebDrive\wdservice.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\WINDOWS\System32\LXSUPMON.EXE
      C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
      C:\WINDOWS\System32\cmd32.exe
      C:\WINDOWS\System32\RUNDLL32.EXE
      C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe
      C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
      C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe
      C:\PROGRA~1\COMMON~1\wwkm\wwkma.exe
      C:\hijackthis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O1 - Hosts: 66.159.20.80 www1.ndhosting.com
      O1 - Hosts: 66.159.20.80 www3.ndhosting.com
      O1 - Hosts: 66.159.20.80 www2.ndhosting.com
      O1 - Hosts: 66.159.20.80 www.ndhosting.com
      O1 - Hosts: 66.159.20.80 www.kinghost.com
      O1 - Hosts: 66.159.20.80 kinghost.com
      O1 - Hosts: 66.159.20.80 www1.kinghost.com
      O1 - Hosts: 66.159.20.80 www2.kinghost.com
      O1 - Hosts: 66.159.20.80 www3.kinghost.com
      O1 - Hosts: 66.159.20.80 www4.kinghost.com
      O1 - Hosts: 66.159.20.80 www5.kinghost.com
      O1 - Hosts: 66.159.20.80 www6.kinghost.com
      O1 - Hosts: 66.159.20.80 www7.kinghost.com
      O1 - Hosts: 66.159.20.80 www8.kinghost.com
      O1 - Hosts: 66.159.20.80 www9.kinghost.com
      O1 - Hosts: 66.159.20.80 www10.kinghost.com
      O1 - Hosts: 66.159.20.80 smutserver.com
      O1 - Hosts: 66.159.20.80 www30.smutserver.com
      O1 - Hosts: 66.159.20.80 www31.smutserver.com
      O1 - Hosts: 66.159.20.80 www32.smutserver.com
      O1 - Hosts: 66.159.20.80 agreathost.net
      O1 - Hosts: 66.159.20.80 www.agreathost.net
      O1 - Hosts: 66.159.20.80 hotfreehost.com
      O1 - Hosts: 66.159.20.80 www.hotfreehost.com
      O1 - Hosts: 66.159.20.80 greatfreehost.com
      O1 - Hosts: 66.159.20.80 www.greatfreehost.com
      O1 - Hosts: 66.159.20.80 freesmutpages.com
      O1 - Hosts: 66.159.20.80 www.freesmutpages.com
      O1 - Hosts: 66.159.20.80 apornhost.com
      O1 - Hosts: 66.159.20.80 www.apornhost.com
      O1 - Hosts: 66.159.20.80 nasty-pages.com
      O1 - Hosts: 66.159.20.80 www.nasty-pages.com
      O1 - Hosts: 66.159.20.80 sexyfreehost.com
      O1 - Hosts: 66.159.20.80 www.sexyfreehost.com
      O1 - Hosts: 66.159.20.80 x4web.com
      O1 - Hosts: 66.159.20.80 www.x4web.com
      O1 - Hosts: 66.159.20.80 sexplanets.com
      O1 - Hosts: 66.159.20.80 www.sexplanets.com
      O1 - Hosts: 66.159.20.80 maxismut.com
      O1 - Hosts: 66.159.20.80 www.maxismut.com
      O1 - Hosts: 66.159.20.80 tgpfriendly.com
      O1 - Hosts: 66.159.20.80 www.tgpfriendly.com
      O1 - Hosts: 66.159.20.80 tgp-server.com
      O1 - Hosts: 66.159.20.80 www.tgp-server.com
      O1 - Hosts: 66.159.20.80 magnaplza.com
      O1 - Hosts: 66.159.20.80 www.magnaplza.com
      O1 - Hosts: 66.159.20.80 free-xxx-server.com
      O1 - Hosts: 66.159.20.80 www.free-xxx-server.com
      O1 - Hosts: 66.159.20.80 libereco.net
      O1 - Hosts: 66.159.20.80 www.libereco.net
      O1 - Hosts: 66.159.20.80 0190-dialer.com
      O1 - Hosts: 66.159.20.80 www.0190-dialer.com
      O1 - Hosts: 66.159.20.80 xxxod.net
      O1 - Hosts: 66.159.20.80 www.xxxod.net
      O1 - Hosts: 66.159.20.80 altsights.com
      O1 - Hosts: 66.159.20.80 www.altsights.com
      O1 - Hosts: 66.159.20.80 adulthosting.com
      O1 - Hosts: 66.159.20.80 www.adulthosting.com
      O1 - Hosts: 66.159.20.80 superhova.com
      O1 - Hosts: 66.159.20.80 www.superhova.com
      O1 - Hosts: 66.159.20.80 bestpornhost.com
      O1 - Hosts: 66.159.20.80 www.bestpornhost.com
      O1 - Hosts: 66.159.20.80 hostingfree.com
      O1 - Hosts: 66.159.20.80 www.hostingfree.com
      O1 - Hosts: 66.159.20.80 xfreehosting.com
      O1 - Hosts: 66.159.20.80 www.xfreehosting.com
      O1 - Hosts: 66.159.20.80 blinghosting.com
      O1 - Hosts: 66.159.20.80 www.blinghosting.com
      O1 - Hosts: 66.159.20.80 x-x-x-hosting.com
      O1 - Hosts: 66.159.20.80 www.x-x-x-hosting.com
      O1 - Hosts: 66.159.20.80 pornparks.com
      O1 - Hosts: 66.159.20.80 www.pornparks.com
      O1 - Hosts: 66.159.20.80 sexls.com
      O1 - Hosts: 66.159.20.80 www.sexls.com
      O1 - Hosts: 66.159.20.80 royalfreehost.com
      O1 - Hosts: 66.159.20.80 www.royalfreehost.com
      O1 - Hosts: 66.159.20.80 pleasuremedia.com
      O1 - Hosts: 66.159.20.80 www.pleasuremedia.com
      O1 - Hosts: 66.159.20.80 www.mtree.com
      O1 - Hosts: 66.159.20.80 mtree.com
      O1 - Hosts: 66.159.20.80 www.dialacom.com
      O1 - Hosts: 66.159.20.80 dialacom.com
      O1 - Hosts: 66.159.20.80 nocreditcard.com
      O1 - Hosts: 66.159.20.80 www.nocreditcard.com
      O1 - Hosts: 66.159.20.80 movies-etc.com
      O1 - Hosts: 66.159.20.80 www.movies-etc.com
      O1 - Hosts: 66.159.20.80 22469.com
      O1 - Hosts: 66.159.20.80 3wisp.com
      O1 - Hosts: 66.159.20.80 www.glamourmodelsgonebad.com
      O1 - Hosts: 66.159.20.80 www.hot-adult-clips.com
      O1 - Hosts: 66.159.20.80 www.fantasiegirl.com
      O1 - Hosts: 66.159.20.80 allowednet.com
      O1 - Hosts: 66.159.20.80 www.freepornofreeporn.com
      O1 - Hosts: 66.159.20.80 www.exscapeporn.com
      O1 - Hosts: 66.159.20.80 amateurnudephoto.com
      O1 - Hosts: 66.159.20.80 amateursgonebad.com
      O1 - Hosts: 66.159.20.80 badbimbo.com
      O1 - Hosts: 66.159.20.80 beautifulbondage.com
      O1 - Hosts: 66.159.20.80 bizshura.com
      O1 - Hosts: 66.159.20.80 big-xxx-movies.com
      O1 - Hosts: 66.159.20.80 boyanxxx.com

      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe
      O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
      O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
      O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
      O4 - HKCU\..\Run: [Ub4TrayApp] "C:\Program Files\Astase\UltraBackup\4.0\bin\ubtray.exe" /start
      O4 - HKCU\..\Run: [wwkm] C:\PROGRA~1\COMMON~1\wwkm\wwkmm.exe
      O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
      O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O15 - Trusted Zone: www.master69.biz
      O15 - Trusted Zone: www.sgrunt.biz
      O15 - Trusted Zone: www.yeak.net
      O15 - Trusted Zone: http://ny.contentmatch.net (HKLM)
      O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://images.goa.com/v3/InstallGoaIT/Itpp/V2,0,1,6/npwwg.cab
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021126/qtinstall.info.apple.com/dribnif/fr/win/QuickTimeInstaller.exe
      O16 - DPF: {486E48B5-ABF2-42BB-A327-2679DF3FB822} - http://akamai.downloadv3.com/binaries/IA/ia_XP.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/activedata/SymAData.cab
      O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/activedata/ActiveData.cab
      O16 - DPF: {F4653484-F38C-455F-BB15-1175E527754E} (VideoProducer Class) - http://www.normal.video-party.com/class/webcam2.cab
      O16 - DPF: {F5C90925-ABBF-4475-88F5-8622B452BA9E} (Compaq System Data Class) - http://www29.compaq.com/falco/SysQuery.cab
      O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - (no file)
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Scan en temps réel OfficeScanNT (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe
      O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
      O23 - Service: WebDrive Service (WebDriveService) - Unknown owner - C:\Program Files\WebDrive\wdservice.exe






      Que dois-je faire ?????

      En attendant une bonne âme qui voudrait m'aider, je vais faire une recherche sur le web pour trouver comment guérir mes virus.

      Merci d'avance :)
      0
  12. Utilisateur anonyme
     
    salut markos,
    colle ton scan

    a+
    0
  13. markos Messages postés 85 Statut Membre
     
    salut regis
    ca fait longtemps que je me suis pas connecte mais j ai tjrs le meme pb..je viens de faire 1 scan avec RAV et la je suis en train d en faire avec Seurity iGuard..
    Si quelqu un peut m aider a supprimer les dossiers indesrables, ce serait sympa..
    merci d avance
    PS: Je colle mon scan en cas de reponse
    a+
    0
  14. markos Messages postés 85 Statut Membre
     
    re...
    je copie mon scan RAV, si une ame charitable peut y jeter un coup d oeil et m aider un peu(bcp!!)...

    Scan started at 13/06/2005 10:33:46

    Scanning memory...
    Scanning boot sectors...
    Scanning files...
    C:\wp.exe - Trojan:Win32/Druogna.B -> Suspicious
    C:\n.exe - TrojanDropper:Win32/Agent.AW -> Infected
    C:\FOUND.000\FILE0000.CHK - TrojanDownloader:Win32/Agent.AN -> Infected
    C:\FOUND.000\FILE0001.CHK - TrojanDownloader:Win32/Agent.AP -> Infected
    C:\WINDOWS\benyws.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\vzoqdh.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ghbbli.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\xoddux.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\sysupd.exe - TrojanDownloader:Win32/Agent.Z -> Infected
    C:\WINDOWS\vwkcbq.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\zoxdnu.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\aaiahb.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\xyliwq.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\cbnlte.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\mydflp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\vsyqfz.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\aprahz.dat - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\uxtqia.dat - TrojanDownloader:Win32/Agent.Z -> Infected
    C:\WINDOWS\mgudoq.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\cucfle.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\zmtwgx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\rqsrpk.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\ddzogf.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\vouhzu.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\eexesz.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\lijlxs.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\phsqxq.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\szcixp.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dgwddk.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\cdrzmy.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\qntmiy.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\rnlglp.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\vdkasx.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\doetds.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\wopcca.dat - TrojanDownloader:Win32/Agent.AL -> Infected
    C:\WINDOWS\okhutw.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\maxkjm.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\tnvurc.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\uubeoe.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\pacyow.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lbiawx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lmkdwb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\yegmid.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\akmpvn.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mspo32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\qwnle.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\n_hsuugd.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\dtbnng.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\oodsmf.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\abzljn.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netvd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\tekhyq.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mpcari.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\spioar.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\hmyems.dat - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\appte.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdktr32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\ntoo32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iekz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkoz32.exe.bak - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appdv32.exe.bak - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_iztpfx.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\apjbkp.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\hufuxb.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netop.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\systj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_jxwlwr.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\mcdmng.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\pacpjg.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\mfcsc32.exe.bak - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crmi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\qevmwm.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\appvo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addxe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crws32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntqo32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\vytock.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\xaklwc.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysel.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\cjkyrw.dat - TrojanDownloader:Win32/Agent.AL -> Infected
    C:\WINDOWS\netib32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\hpzbyd.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\craz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msbb32.exe.bak - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkqu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crhm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkfp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_wzzlzi.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\syskx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\croh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atllj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdtnio.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\winfe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlso.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipqb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipln.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addgk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iorwtd.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apiko32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iehx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipvr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javaxe.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addgk32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iezj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crjp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipxx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\syszp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysug.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\brvguc.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msjv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntsn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lorhjq.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apilt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apioj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ccejvd.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\apppv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntkf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipoo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntcp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\logeav.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\hycohf.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netvv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipdz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nethr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ywubox.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msqx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntpk32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netnf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nltwzz.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\qzguxf.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\jaouxc.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winen32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javael.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\fehfmx.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\hpwmsc.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntug.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mssb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcfx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3zg32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3mb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javasa32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcgu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winuq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crib32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\maqtsv.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addml32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysnv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addbx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netlw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\pmmrfy.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iptk32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addfd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apijf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcwa.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntec32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winqz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msps.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appeq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipwg32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netmj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\syslj32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlql32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipbc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkdb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\adduv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntnn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcax.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ucgscx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javaeh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crep.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysdi.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\eptcd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ipqm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crzw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\amyeni.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crej32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcoz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appna.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iezs.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipfy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nethx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcrn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iejo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apits32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcdr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netts.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcxi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlcq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysqz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appnn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysmi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dnowyj.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\javacq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appzk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crmj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysjr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dwafhu.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipfq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crrq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dfofik.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nxcutb.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msmx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addbt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ieuy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\vduopb.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntmd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netsh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msee.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nbsbya.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\pbgdqx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ziniac.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\euyflv.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ekpjnx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysqn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javadx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipzt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkaf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msja32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javasu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mskq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winbq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkqy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ppwrfh.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apiga32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkwh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netee.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javawn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addft.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntxz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\tzolph.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javajn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ufufdw.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ltwkxc.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\msut.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfchx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcdz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addvl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\tkypjz.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\ytkfoe.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\bshfpr.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\qmdllw.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apipj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipdq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\uajscv.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\crah.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apiue.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addgi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipiz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\wingh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appim.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crtq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crik.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\yhbsih.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\sdkwm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addns32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\hdgzyw.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\apiyj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crmf32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addmx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appow32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msok32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winon32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\xvfjdm.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\kbwawt.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\yaasei.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\sdktm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apide32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ierz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mzqopt.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\crgiqp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\apidx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntov.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addxb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3wp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipcr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipjz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lxfxfo.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\mfcoj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysbl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appdy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apils32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcde32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msjy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\rkrpsm.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\qxnpeh.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\atlvl32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crgk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iejt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlij.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addte.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\wincr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addwv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysmq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crfp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysyt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\rmmfhm.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\appov.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apiqa.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\soewcb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\atlag.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atldq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ieog32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apijq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\vdrbcx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntmv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcbe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winig32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javacm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addim.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkhc32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netqf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iqmdkn.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\hduurp.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\javahc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3da.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\paspyq.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\ipfx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntvm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipkr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\aatyw.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\javayt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcfr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3xb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\usvay.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ievd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winhz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipzq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crhx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcjx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysdl32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3gx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iplt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iwcthy.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\sysaw.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iqnvns.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ntmx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winwx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mfcll.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crld.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkhe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sawvb.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ipmm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysfz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addql.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ieyf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkol32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlis32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkuy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crds.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlvw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addkr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_htthwt.txt - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crky32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\winam32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addyk32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lllcib.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\ntjp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netcu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crlc32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javavt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\javanl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\crth32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\d3bv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkfx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_hlnust.txt - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\syssv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ipyp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\wineg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\appui.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ienh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysxl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netwn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlgt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\addem32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkmr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dwoiwd.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\ipml32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\iecq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netwa32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\syslp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atlgg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdknh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\atljx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ieth32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netps32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\mspr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\apicn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\fefmqb.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\n_wgdrxa.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\hswscc.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\ntdh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ieyd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sdkdf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\msfs.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netjp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\ielp.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\netvt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\lpaauv.log - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\mfcto.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\sysar32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\adhrst.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\wecowp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\n_cqzkex.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\dmfyfp.dat - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\wehtck.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_zzznhn.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\cdqwrj.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\vnylok.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\sluztv.log - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\hsndwf.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\crhsip.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_qeckvq.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\zenzus.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\vwpdvb.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\oxijyl.txt - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\gpegzw.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\yiotby.txt - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\linxdl.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\wjfdyv.log - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\rimqbh.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\kalgmi.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\nqhxsr.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\frscut.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\dnlspi.txt - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\vnwyjk.txt - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_gnfwti.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_kuhgtd.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\yckizg.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_wihcyf.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_ntntva.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_hhlbvk.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_srefpz.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_ixgdgd.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_ynxbuj.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_zefnek.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_gwbwdt.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_jysaet.dat - Trojan:Win32/WebSearch.B -> Infected
    C:\WINDOWS\n_lwoiwc.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_ysjuoz.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_prrxor.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_xjxvxt.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\owgwj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\n_yknmgo.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_swwxyg.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_gbpuvc.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_ffxkdf.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_hzxjdl.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_edfyfj.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_ctirov.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_grgwqe.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_jgpghb.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_pmaqdz.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_xdomaf.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\svcmfs.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\n_vufpdo.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_sehqjk.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_dgnmdy.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_iedefs.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\okzcd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\n_rlitwz.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\nueyi.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\n_qvrxmb.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_jhvqbn.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_hckqrx.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\msli.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\n_hbnmgr.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\n_vpfjrt.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\crak32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\n_svbbsk.dat - TrojanDownloader:Win32/Agent -> Infected
    C:\WINDOWS\hwmfy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\biyvw.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ugozz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\jsrjz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\appmm.dll - TrojanDownloader:Win32/Agent.CA -> Infected
    C:\WINDOWS\ffbwf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\javaun.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\uexbn.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\qtvtj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\hcxhv.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\gxnld.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\glfos.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\kkong.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\vbftt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\tpdqd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\vlmqk.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\vjuyi.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\pszdy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\lqaav.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\nnakz.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\stqkx.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\crol.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\wintn32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\xmfkf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\qhrecm.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\jhjjwx.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\racdq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\tlqrf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\mfmfd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\wincr32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\dtbrk.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ntzc32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\vggwg.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\apivu32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\javakt32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\opbac.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\javabz32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\bvszc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\ipxl32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\flojh.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\nfeug.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\wwybq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\vxpugc.dat - Trojan:Win32/Agent.BQ -> Infected
    C:\WINDOWS\oxazin.dat - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winjc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msra.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\DHTMLAccess.dll - TrojanDownloader:Win32/Wintrim.O -> Infected
    C:\WINDOWS\SYSTEM32\mfcbg32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addpc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiox32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addqo32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\SYSTEM32\wintm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcjl32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iedk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netxv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiqg32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netei.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3lh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javapr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntqr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apivt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winid.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apihx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javaoy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieex32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3oe.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysqj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\creh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\wincu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winpx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcnl32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipbt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mstz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\nttl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\syskr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3eb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javawi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntub.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javaoa32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlfm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieol32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlad32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addvh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apioe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addxd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntls32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appfj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfchg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkgb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mskd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiuf32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crqb.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crxv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netwj32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcue.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\systs32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcsd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipde32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlwu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javafb.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apieo32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlcj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netvi.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\EGDHTML_1017.dll - TrojanDownloader:Win32/Wintrim.F -> Infected
    C:\WINDOWS\SYSTEM32\appis.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\nethl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crdp.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atliy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieuh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlyz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipry32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcbw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netki.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcoz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3xg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netet32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcuo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netox.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addhy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crbv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winfz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkpd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipxe32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\apikj32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crxf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3rq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntfe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3mi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winrc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crsj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javaqe32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysvr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\syskm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysfw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msdp.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crbu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysbd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipqw.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iphk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crua.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msdt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crgd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msfn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winne32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3ew.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcyd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msdd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\lspom.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\winhk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crvs32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntrg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iemq.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlzi.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkkm32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlcf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\guonm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\mfcfx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\alday.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\javagz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiau.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3be32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appfu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ouyuu.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\badhm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\ntjd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msck.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\lxbum.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\ygrln.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\mfcwo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkgu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipya.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crxm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntyy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\nethg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appnb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipgd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3kp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiok.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlgz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlwa32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntqq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntik32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipoq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipnr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addts.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcxy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apixo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdker.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addzy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieue.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javabg32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ietd.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkzi32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipld32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ienu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3lp.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkna.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netvr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iplv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlyd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appny.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntxw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javavd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\avrzt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\syszv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntxb32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysgh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iecl.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netkw.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netlp.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crqz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mspz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcte32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msqf32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\syshx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msjk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipwx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysuy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntmw.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mscd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiuh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiuu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appqw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcyf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3fs32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcxm.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysmk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mskf32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mstt.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcqu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntbt32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\wingv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdkvo32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3gn32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieag32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crou32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3yz.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntsj.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netvk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winik.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipic.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3nk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winjy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mspy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msqr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mslf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apimz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfctf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3ii.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apiyc32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdksh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msug.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sdktx32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3pv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iedx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlyx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysxh32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcby32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\appqf32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3zz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msid.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntvn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysqx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlbv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atllz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javasc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3qy.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3cb.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atljd32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crvy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysft.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mspv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3ny32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addag.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\apitk.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ieeq32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netrw32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ipit.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3gg.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netma.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winuo.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\javaxz32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\iekr.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winda.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfccv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlar32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlmu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\msak.dll - TrojanDownloader:Win32/Agent.AN -> Infected
    C:\WINDOWS\SYSTEM32\atlyp32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcpr32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\crwy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysox.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\ntmn.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysvu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\cros.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\atlxy32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winhx.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysqf.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3ae32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3dv32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\wintc.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysxs32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\addlu.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\mfcnh.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\d3et.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\winpu32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\cril32.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\sysyv.exe - Backdoor:Win32/Small.EF -> Infected
    C:\WINDOWS\SYSTEM32\netrm.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\zgtym.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\oppam.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\xxqkn.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\sysly32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\ieid.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\xcemt.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\atlgt.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\koqyq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\mfcyu32.dll - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\WINDOWS\SYSTEM32\ipjdd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\seifb.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\rjaxm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\ftuir.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\atdnm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\xflmf.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\ssbzo.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\hfnju.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\qegsu.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\x.exe - TrojanDropper:Win32/Small.UY -> Infected
    C:\WINDOWS\SYSTEM32\hvfkm.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\bfsrr.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\wplkl.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\njrev.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\krydq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\mhsxd.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\appgj.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\SYSTEM32\atlgr32.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\SYSTEM32\xeziq.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\start.hta - JS/Psyme.F* -> Suspicious
    C:\WINDOWS\SYSTEM32\start.hta->(SCRIPT0000) - TrojanDropper:VBS/Inor.A* -> Infected
    C:\WINDOWS\SYSTEM32\start.hta->(SCRIPT0001) - JS/Psyme.F* -> Suspicious
    C:\WINDOWS\SYSTEM32\sdkpw.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\SYSTEM32\winli.dll - TrojanDownloader:Win32/Agent.HB -> Infected
    C:\WINDOWS\SYSTEM32\adodj.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\vdwgs.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\anzrc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\crnf32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\SYSTEM32\mfcnx.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\SYSTEM32\sdklb32.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\SYSTEM32\cpssh.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\sdkhq.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\WINDOWS\SYSTEM32\xpquy.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\squnc.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\sysrq.dll - TrojanDownloader:Win32/Agent.HD -> Infected
    C:\WINDOWS\SYSTEM32\sdkaj.dll - TrojanDownloader:Win32/Agent.HD -> Infected
    C:\WINDOWS\SYSTEM32\hjuai.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\svcaa.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\xuzdr.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\jzxkl.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\wojpg.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\WINDOWS\SYSTEM32\svcnut32.exe - TrojanDownloader:Win32/Delf.FJ -> Infected
    C:\WINDOWS\SYSTEM32\dload.exe - TrojanDownloader:Win32/Small.MY -> Infected
    C:\WINDOWS\SYSTEM32\MTC.dll - TrojanDownloader:Win32/Agent.GA -> Infected
    C:\WINDOWS\SYSTEM32\srpcsrv32.dll - TrojanDropper:Win32/Agent.AX -> Infected
    C:\WINDOWS\SYSTEM32\txfdb32.dll - TrojanDropper:Win32/Agent.AX -> Infected
    C:\WINDOWS\SYSTEM32\DRIVERS\delprot.sys - VirTool:WinNT/Ispro.B -> Infected
    C:\FOUND.008\FILE0025.CHK - TrojanDownloader:Win32/Agent.BC -> Infected
    C:\FOUND.008\FILE0195.CHK - Trojan:Win32/Agent.BQ -> Infected
    C:\Documents and Settings\bensouna gilles\Local Settings\Temp\temp.fr33CD - Backdoor:Win32/Small.EF -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP557\A0454726.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454738.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454930.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454946.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454954.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454961.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454969.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454977.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454985.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP559\A0454993.dll - TrojanDownloader:Win32/Agent.HT -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP503\A0420719.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0420724.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0421733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0421734.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP504\A0422733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0422737.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0424733.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP505\A0424738.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP507\A0424766.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424802.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424838.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424839.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424840.dll - TrojanDownloader:Win32/WinShow.AK -> Suspicious
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424841.dll - TrojanDownloader:Win32/Agent.CA -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP508\A0424845.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP512\A0424866.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP515\A0424887.dll - TrojanDownloader:Win32/Agent.GX -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP547\A0441109.exe - Backdoor:Win32/Small.EF -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444191.exe - TrojanDownloader:Win32/Small.MY -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444193.exe - TrojanDropper:Win32/Small.RC -> Infected
    C:\System Volume Information\_restore{B80D0203-23A7-4F7A-834E-B6F90A91367A}\RP548\A0444198.exe - Tool:PornDialer.BP -> Infected
    C:\System Volume Information\_restore{B8
    0
  15. Utilisateur anonyme
     
    re,
    whaou vu le nombre de ce qu il te trouve, autant faire ca autmatiquement,

    ¤Désactive ta restauration systeme:
    Clic droit sur poste de travail puis,
    propriété, tu clique sur onglet restauration système
    tu coche la case désactiver la restauration et applique

    utilise ceci

    3/Clean Up 312:
    http://pageperso.aol.fr/Balltrap34/CleanUp312.exe

    puis celui ci:
    A2 Free (anti-trojans et worms)
    http://www.emsisoft.net/fr/software/download/

    et refais un scan pour verif

    a+
    0